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The Qualys guide to building a solid 
security posture 


Your Challenge 

With GDPR’s vague but far-reaching requirements, one thing is clear for 
InfoSec teams: Your organizations must have solid security foundations 
to comply with this regulation. You need to prove you're doing all you 
can to prevent breaches of your EU customers' personal information. 


How we can help 

With the Qualys Cloud Platform and its integrated suite of cloud 
applications, you will be fully equipped to manage your GDPR readiness 
from a security and compliance perspective. Here, we'll explain how 
Qualys can help you build solid foundations in key security areas. 


Using this infographic 
Click on the "See more" buttons for more information on how our 
solutions can help. 
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Get full, instant visibility of all your 
global IT assets 


Get complete 


1 visibility Asset Inventory gives you a complete, continuously updated inventory 
° | of your IT assets, wherever they reside, giving you the visibility you need 
e for GDPR compliance. 
. I s e Continuous and automatic updates 
e e 
m o di e Asset criticality rankings 
o o 
e e e [nteractive, customizable dashboarding and reporting 
e Integration with your CMDB 
o e e 
E ve D A Asset Inventory > 
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Minimize third-party and internal risks 


Security Assessment Questionnaire helps you scale and automate 
risk assessments of your third parties and internal teams, as required 
by GDPR. 


e Intuitive survey design and pre-built templates, including 
GDPR-specific resources 


e Simplified questionnaire distribution 
e Automated campaign tracking and response monitoring 


e Centralized data aggregation and report generation 


Survey Assessment Questionnaire » 
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Assess security configurations 
of IT systems 


Policy Compliance enables you to track and validate access to files and 
databases where GDPR-protected data is stored and analyzed. 

e Quick policy creation 

e [dentification and remediation of compliance issues 

e Comprehensive reports on performance against requirements 


e Extensive library of controls 


Policy Compliance » 
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Detect vulnerabilities and 
prioritize threat remediation 


Detect and protect . 
against threats d Vulnerability Management helps you “immunize” your IT assets against 


attacks through continuous detection, assessment and remediation 


e 
o 
Oo 


of vulnerabilities. 


: 
. e Next-gen vulnerability management for hybrid IT environments 


e e e Six Sigma (99.9996676) vulnerability scan accuracy 


o © 
z ? Threat Protection enables you to pinpoint the most critical threats so 

you can prioritize patching. 

AU E e Real-time view of threats with customizable dashboard 

e o e & ; 
m LS In e Powerful search function 
o o mu — 
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e e Threat Protection » 
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Protect web applications 


Web Application Scanning gives you full visibility of the web apps 
involved in gathering and processing EU customer data. 


° e Discovery and detection of web app vulnerabilities and 
. ° . misconfigurations that could lead to breaches 
: : 
Cw : bs e Identification of website infections, including zero-day threats 
e e e 
Find and fix web : Web Application Firewall provides scalable, simple and powerful 
vulnerabilities protection of web apps to prevent disclosure of GDPR-protected 
information. 
- : e Quick blocking of attacks, virtual patching of vulnerabilities, 
„r. ° *.. and app access control 
: e Web Application Scanning > 
e e 
* : Web Application Firewall > 
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Identify signs of compromise 


File Integrity Monitoring lets you log and track file changes across global 
IT systems. It provides security controls in three key areas of GDPR. 


° | e Ensuring integrity of data stored in filesystems 
; e : m 
, H ; e Protecting confidentiality of data by detecting changes to file system 
j i access controls 
e © e 
e e 
© = ° e Detecting breaches 
o o 
hd 9 AS Me i ; - 
Indication of Compromise lets you do threat hunting, monitor suspicious 
activity, and detect malware families. It can help you with two specific 
ee " (IDEOQUE: 
pe dE ee e Protecting personal data 
e ô | e Knowing the extent of breaches so you can notify affected parties 
Identify signs of e e — ,LLLZOECALLLLLLLLLOBILEILEZKÁLCLLUIOe)EULSLOUCOSSESOÓ 
compromise o o 
e e (Fm) File Integrity Monitoring > 
oc. | 
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Get visibility across your public clouds o 


Cloud Inventory gives you a comprehensive inventory of your public 
cloud workloads and infrastructure. 


« Comprehensive visibility 


"m e Easy deployment 


. e Control of ephemeral environments 
o 
e e 


e e Cloud Security Assessment continuously monitors and assesses your 
o o 

cloud assets and resources for misconfigurations and non-standard 
deployments. 

e e e Insight and threat prioritization 

e ° ee 
e > > e : : : . : : 
uu ne e Quick identification of incident causes 
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e Comprehensive DevOps protection 
e e 
Ó e 
Cloud Inventory > 
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